---
id: CVE-2026-112371
title: H3C Magic NX15 RPC esps write code injection
summary: >-
  A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the
  function write of the file /api/esps of the component RPC Interface. Executing
  a manipulation of the argument path can lead to code injection. The attack can
  …
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-94
  - CWE-74
vendor: H3C
product: Magic NX15
affected:
  - magic_nx15 NX15V100R017
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T22:30:17.115Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112371'
references:
  - url: 'https://vuldb.com/vuln/422417'
    label: VDB-422417 | H3C Magic NX15 RPC esps write code injection
  - url: 'https://vuldb.com/vuln/422417/cti'
    label: 'VDB-422417 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-112371'
    label: CVE-2026-112371 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/983538'
    label: 'Submit #983538 | H3C Magic NX15 NX15V100R017 Code Execution'
  - url: >-
      https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/file_write_root_rce
tags:
  - cve.org
ingestedAt: '2026-10-19T22:46:42.319Z'
---

## Overview

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

## Affected

- `magic_nx15 NX15V100R017`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.